Open to opportunities

Tarun Pardeshi

@tarunpardeshi

Message

Cloud-focused penetration tester specializing in web, API, and cloud security.

India

Message

What I'm looking for

I seek roles focused on cloud and application security where I can lead penetration testing, improve secure development practices, and collaborate with teams to reduce risk and implement automated security controls.

I am a cybersecurity professional specializing in cloud penetration testing, web and API security, and vulnerability assessment across AWS, Azure, and GCP. I have conducted enterprise and bug-bounty engagements, discovered critical vulnerabilities, and delivered actionable reports with PoCs and remediation guidance.

I collaborate closely with development and security teams to implement secure development practices and automated scanning, and I bring hands-on experience with tools like Burp Suite, OWASP ZAP, Nmap, and Metasploit. My work includes threat modeling, secure code review, and cloud attack-surface mapping for clients across regions, including Dubai.

Experience

Work history, roles, and key accomplishments

Current

Cyber Security Consultant

Current

Traâna Digicorp LLP

Mar 2025 - Present (7 months)

Performs comprehensive web, mobile, and API penetration tests, produced CVSS-scored reports with PoCs and remediation, and collaborated with client security teams in Dubai to prioritize and verify fixes.

Web Testing API Security Burp suite OWASP ZAP Threat Modeling Mobile Security PoC Development CVSS

Current

Security Researcher

Current

Bugcrowd

Aug 2021 - Present (4 years 2 months)

Conducts web and API penetration testing via bug bounty engagements for enterprise clients and discovered 31+ critical vulnerabilities, delivering technical reports with PoCs and remediation steps.

Bug Bounty Web Security API Testing RCE IDOR SSRF PoC Development Vulnerability Reports

Intern – Information and Cyber Security

SECMYIT Infosec Solutions

Jun 2024 - Oct 2024 (4 months)

Conducted penetration testing on cloud-based applications, identified misconfigurations, developed custom automation scripts, and authored risk assessment reports with mitigation strategies.

Cloud Security Penetration Testing Scripting Vulnerability Assessment Reporting Automation Misconfiguration Detection

Information Security Analyst

John Deere

Jan 2024 - May 2024 (4 months)

Performed API security assessments and secure code reviews for cloud-hosted applications, mitigated issues like hardcoded secrets and SQL injection, and collaborated with DevSecOps to implement automated scanning and secure coding practices.

API Security Code Review DevSecOps Cloud Security CIS NIST